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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application: 
Listing of Claims 

1. (Currently Amended) A method of communicating data securely within a 
wireless communications network, comprising the steps of: 

communicating, by a mobile station, separately with an authentication server and 
a database server ; 

receiving a first authentication request at [[an]] said authentication server from a 
mobile station; 

providing a first key from said authentication server to said mobile station in 
response to said authentication; 

receiving a second authentication request at said authentication server from [[a]] 
said database server, said second authentication request further including said first key 
provided by said authentication server to said mobile station and a particular data 
identifying a database record to which said mobile station is requesting access; 

determining at said authentication server as to whether said mobile station has 
authority to access said particular database record; and 

in response to said affirmative determination, 

instructing said database server to provide information associated with 
said requested database record to said mobile station wherein said information is 
encrypted; and 

providing by said authentication server to said mobile station a second key 
enabling said mobile station to decrypt said information received from said database 
server using said second key. 

2. (Original) The method of Claim 1 wherein said step of providing said first 
key to said mobile station further comprises the step of providing a time out period for 
said first key to said mobile station. 
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3. (Original) The method of Claim 1 wherein said information stored in said 
database server is encrypted using a data access key and said second key is generated 
from said data access key and said first key. 

4. (Original) The method of Claim 1 wherein said step of instructing said 
database server to provide information to said mobile station further comprises the step 
of providing said database server with a third key wherein said third key is used by said 
database server to further encrypt said information. 

5. (Original) The method of Claim 4 wherein said information stored in said 
database server is encrypted using a data access key and wherein said third key is 
generated from said data access key and said first key and said second key is 
generated from said data access key, said first key and said third key. 

6. (Original) The method of Claim 1 further comprising the steps of: 
receiving a third authentication request from said database server requesting 

authorization to update said particular database record by said mobile station; 

determining whether said mobile station has authority to update said database 
record; and 

in response to an affirmative determination, 

instructing said database server to allow said mobile station to update 
information associated with said database record; and 

providing said mobile station with said second key enabling said mobile 
station to encrypt any information to be transmitted over to the database server to be 
updated at said database record. 

7. (Original) The method of Claim 1 wherein said information stored in said 
database record is encrypted using a data access key and said second key provided to 
said mobile station is generated from said data access key and said first key. 
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8. (Currently Amended) [[The]] A method of storing and communicating data 
securely within a mobile telecommunications network wherein said mobile 
telecommunications network provides wireless service to a wireless device and further 
includes an authentication server, comprising the steps of: 

storing particular information within a database server wherein said data is stored 
encrypted using a first encryption key; 

communicating, by a wireless device, separately with an authentication server 
and said database server ; 

receiving a request from said wireless device to access said information within 
said database server; 

in response to said request, transmitting an authentication request from said 
database server to said authentication server; 

receiving authentication approval from said authentication server regarding said 
wireless device for said requested information wherein said authentication server further 
provides a decryption key to said wireless device; and 

providing said requested information encrypted to said wireless device wherein 
said wireless device decrypts said information using said decryption key provided by 
said authentication server. 

9. (Original) The method of Claim 8 wherein said step of receiving said 
authentication approval from said authentication server further comprises the steps of: 

receiving a second encryption key from said authentication server; 
encrypting said stored information using said second encryption key; and 
providing said encrypted information to said wireless device. 

10. (Original) The method of Claim 8 wherein said step of receiving said 
request from said wireless device to access said information further comprises the step 
of receiving a session key generated by said authentication server from said wireless 
device. 

11. (Original) The method of Claim 10 wherein said step of transmitting said 
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request to said authentication server further comprises the step of including said 
session key within said request. 

1 2. (Original) The method of Claim 8 further comprising the steps of: 

receiving a second request from said wireless device to store particular 
information within said database server; 

transmitting a second authentication request to said authentication server; 

receiving second authentication approval from said authentication server 
instructing said database server to allow said wireless device to update said database 
server with said requested information; 

receiving said particular information from said wireless device wherein said 
information being encrypted using a particular encryption key; and 

storing said encrypted information within said database server. 

13-18. (Cancelled) 

19. (Currently Amended) A database server for storing and communicating 
data securely with a wireless device associated within a mobile communications 
network, said mobile communications network including an authentication server, 
comprising: 

means for communicating, by a wireless device, separately with an 
authentication server and a database server; 

means for storing particular information within said database server wherein said 
data is stored encrypted using a first encryption key; 

means for receiving a request from said wireless device to access said stored 
information within said database server; 

means for transmitting an authentication request to said mob i l e authentication 
server in response to said request; 

means for receiving authentication approval from said authentication server 
regarding said wireless device for said requested information wherein said 
authentication server further providing an decryption key to said wireless device; and 

Amendment - PAGE 5 of 14 

EUS/J/P/06-9206 



Attorney Docket No. P15049-US1 
Customer Number 27045 



means for providing said requested information encrypted to said wireless device 
wherein said wireless device decrypts said information using said decryption key 
provided by said authentication server. 

20. (Original) The database server of claim 19 wherein said means for 
receiving said authentication approval from said authentication server further comprises: 

means for receiving a second encryption key from said authentication server; 
means for encrypting said stored information using said second encryption key; 

and 

means for providing said encrypted information to said wireless device. 

21. (Original) The database server of Claim 19 wherein said request from said 
wireless device to access said information further comprises a session key generated 
by said authentication server from said wireless device. 

22. (Original) The database server of Claim 21 wherein said request to said 
authentication server further comprises said session key received from said wireless 
device. 
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